Discuss IAPP CIPP/C Exam Topic 1 Question 19

Privacy Is Hiring Inc., a CA-based company, is an online specialty recruiting firm focusing on placing privacy professionals in roles at major companies. Job candidates create online profiles

outlining their experience and credentials, and can pay $19.99/month via credit card to have their profiles promoted to potential employers. Privacy Is Hiring Inc. keeps all customer data at rest encrypted on its servers.

Under what circumstances would Privacy Is Hiring Inc., need to notify affected individuals in the event of a data breach?

AIf law enforcement has completed its investigation and has authorized Privacy Is Hiring Inc. to provide the notification to clients and applicable regulators.

BIf the job candidates' credit card information and the encryption keys were among the information taken.

CIf Privacy Is Hiring Inc., reasonably believes that job candidates will be harmed by the data breach.

DIf the personal information stolen included the individuals' names and credit card pin numbers.

Suggested Answer: D

Get Premium CIPP/C Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

11 comments · newest first

Malissa 12 months ago

I disagree with A, law enforcement shouldn't dictate notifications.

Roosevelt 1 year ago

D is crucial, names and pins are super sensitive.

Cyndy 1 year ago

Surprised they wouldn't notify for A, seems like a no-brainer!

Harrison 1 year ago

I think C makes sense too, harm is subjective.

Cherry 1 year ago

Definitely B, credit card info is a big deal!

Keneth 1 year ago

I recall that law enforcement involvement can change the notification requirements, but I’m not sure if that applies here. Option A seems less likely to me.

Sue 1 year ago

I practiced a similar question where the focus was on the type of data stolen. If names and credit card pins are involved, I feel like option D could be a strong contender.

Valentin 1 year ago

I’m a bit unsure, but I think it also depends on whether the breach could lead to harm for the individuals. Option C might be relevant here too.

Cyril 1 year ago

I remember studying about data breach notifications, and I think it’s crucial to notify if sensitive information like credit card details is compromised. So, option B seems right.

Rozella 1 year ago

The key here is that the developer wants the Visualforce page to match the Lightning Experience. Based on that, I think the answer is D, `lightningStylesheets='true'`. This should ensure the page integrates seamlessly with the Lightning UI.

Jolene 1 year ago

I'm a bit confused on this question. I know the Front Panel and Block Diagram are S resident, but I'm not sure about the other options. I'll need to review my notes before answering.

IAPP CIPP/C Exam - Topic 1 Question 19 Discussion